s.ferey pisze:
> Łukasz Piątkowski a écrit :
>>
>> - I have a CardMan 5321 reader, drivers installed and running with pcscd:
>>
>> - I have two models of smartcards, I'm not 100% sure of their
>> models/names (some hints how to get them?), but I think they are:
>>     - Oberthur ID-One Cosmo 64
>>     - Siemens CardOS 4.3
>>
>> I wanted to use Java Card, so I focused on Oberthur. As far as i
>> understand, there is a beatiful thing: a plugin for muscle using
>> directly Oberthur's AuthentIC plugin. So I installed the plugin. I have
>> no idea whether pcscd is using it - I don't know how to check it.
>> Anyway, when i run muscleTool and try to list tokens, I get:
>>
>> muscleTool > tokens
>> No Valid Tokens Found
> 
> Not all Cosmo 64k come with AuthentIC loaded & instantiated.
> When present, the plug-in developed by IdealX manages the applet.

OK, my bad - I didn't set a valid plugin with bundleTool. Now, when I run:

r...@lp:/usr/local/bin# ../sbin/bundleTool
Select the appropriate token driver:
------------------------------------
  1.     authentIC.bundle
  2.     mscMuscleCard.bundle
------------------------------------
Enter the number: 1

Insert your token in: OMNIKEY CardMan 5x21 00 00

Token support updated successfully !


Now I try to use the card in muscleTool:

r...@lp:/usr/local/bin# ./muscleTool
MuscleCard shell - type "help" for help.
muscleTool > tokens
   1.    authentIC Plugin

ListTokens Success.
muscleTool > connect 1
ERR: EstablishConnection Failed !
Is your card already formated?
muscleTool > format 1
ERR: EstablishConnection Failed ! (0x9C52 Token is unsupported)

So, still nothing... :( I have an AuthentIC Manager for windows and it
runs smoothly on XP: I can login using PIN and generate new RSA keys (I
suppose that means the applet is installed and OK).


My next try was using Muscle Applet. I've compiled it and tried to put
on the card using some gpshell I googled around. Unfortunately, there
was a line which sends APDU expected to set initial PINs after
installing applet - and it didn't work for me. Anyway, I tried to use a
muscle applet:

r...@lp:/usr/local/bin# ../sbin/bundleTool
Select the appropriate token driver:
------------------------------------
  1.     mscMuscleCard.bundle
------------------------------------
Enter the number: 1

Insert your token in: OMNIKEY CardMan 5x21 00 00

Token support updated successfully !


(BTW, I had to move authetIC service from pcsc directory away, otherwise
my muscleTool still saw an Authentic applet instead of muscle's, even
after selecting in bundleTool)

OK, now muscleTool:

r...@lp:/usr/local/bin# ./muscleTool
MuscleCard shell - type "help" for help.
muscleTool > tokens
   1.    MuscleCard Applet

ListTokens Success.
muscleTool > connect 1
Connect Success.
muscleTool [MuscleCard Applet] > format 1

Would you like to:
0. Abort this selection.
1. Use the default key : 4D7573636C653030
2. Enter your own transport key

My transport keys are 16B long, so I don't know which transport key
should I use here. I've tried both default and the keys I got with a
card. After filling all the parameters I got
- when using deafult key:
Transport key       : Muscle00
Admin PIN           : 111111
User PIN            : 111111 (10 tries)
User unblock PIN    : 111111 (10 tries)
Object memory       : 5000 bytes
Create object ACL   : 0x0002
Create key ACL      : 0x0002
Create PIN ACL      : 0x0001
...
Formating token [*] : ERR: Format failed ! (0x9C02 Authentication failed)

- when using my supplied key:
Formating token [*] : ERR: Format failed ! (0x9C0F Invalid parameter)

So, again, a complete failure :(


> Where does the card come from ? and what is, according your knowledge,
> the status of the Card Domain (which state & which kind of OP keys).

The card is Oberthur's card that is now being used as Electronic Student
ID Card for all main univeristies in Poland. I got the card for testing
under linux from one of Student Card project coordinators - they use it
only under windows. I just wanted to check if I'm able to use this
student card for other services. If it is interesting for you, I can ask
and get the exact model of the card.

Anyway, I don't really need to use exactly that card. I need to be able
to do the following things:
- Mifare 1k on board
- put PKCS#11 there, be able to use them in my applications using
opensource libraries implementing pkcs#11 / pkcs#15.

Could someone tell which card is best for my purposes and just *works*.
I'm now after 2 weeks of trying to use this Oberthur card and Siemens
cardos 4.3 (which i suppose just won't work).

Thanks again for any help,


Łukasz Piątkowski

_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to